Bringing Mac users down from local admin

We have a few developer-types that "have" to have admin access to their local Macs. Is there some logs to look at, or a way to find out what all they are doing that actually needs admin access, and maybe grant them file or folder-level permission to doing that?